Behavioral task
behavioral1
Sample
7896dfdbd3582fde54f4e46d46ea40a0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7896dfdbd3582fde54f4e46d46ea40a0.exe
Resource
win10v2004-20231215-en
General
-
Target
7896dfdbd3582fde54f4e46d46ea40a0
-
Size
191KB
-
MD5
7896dfdbd3582fde54f4e46d46ea40a0
-
SHA1
ab9c32b238b3ce850c92a9580e5f0843ee249314
-
SHA256
e7894fca588930cb53e5a38279d1ac9c861a687ec65ceb91943735af88a5649c
-
SHA512
a3742b18b9b40666bae1a1ae2a4fc26f579287a51394f253043338b8251ff3e3875da846e09b4749f4a90bbd25ed9be8b08a4810a729f52a901f1b2752b2c1b9
-
SSDEEP
3072:XCpMdxjP3ELeVG+VLUGiHkRmhvjzI79ERMwm/fw16h7D2ZHFgfSP2+Z:XCMxj8LUG6UJplnIpERv4w1mD2eSPx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7896dfdbd3582fde54f4e46d46ea40a0
Files
-
7896dfdbd3582fde54f4e46d46ea40a0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 872KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE